Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
File:                     34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa (raw, json)
Hash identifier:          pKM7dP5sG0/qHLLmyCabW7vc9eO+g0nvYaGoOZZbHy0=
Subject key identifier:   99:05:AF:2B:DA:53:F7:DE:39:25:36:52:E3:E5:89:0E:86:90:FD:FD
Certificate issuer:       /CN=B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF
Certificate serial:       1CFB4CF55EB4D29198F91E42073816603BDD365B
Authority key identifier: B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa
Signing time:             Mon 09 Dec 2024 18:33:40 +0000
ROA not before:           Mon 09 Dec 2024 18:28:40 +0000
ROA not after:            Mon 08 Dec 2025 18:33:40 +0000
asID:                     268737
IP address blocks:        45.171.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fb:4c:f5:5e:b4:d2:91:98:f9:1e:42:07:38:16:60:3b:dd:36:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF
        Validity
            Not Before: Dec  9 18:28:40 2024 GMT
            Not After : Dec  8 18:33:40 2025 GMT
        Subject: CN=9905AF2BDA53F7DE39253652E3E5890E8690FDFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:3f:26:b6:9c:ea:06:d8:99:05:23:3e:14:
                    bb:a3:7d:ec:b6:96:c3:63:fb:5f:d0:7d:47:51:95:
                    44:d8:f7:81:03:c0:45:d8:a6:4d:84:a8:8b:4c:69:
                    d1:12:71:27:2c:8f:97:2c:13:78:aa:51:0b:94:52:
                    cc:1e:60:8f:cd:17:15:3e:9b:4a:2c:85:f6:9e:b4:
                    bb:6c:b0:50:ad:6e:2c:07:f9:c3:e7:a5:43:5d:bb:
                    92:21:a4:18:45:aa:0f:d2:6d:0f:f5:09:81:67:75:
                    b7:32:53:50:f8:e5:f6:8f:ed:cd:3a:3e:a6:80:f9:
                    03:78:3d:5d:61:a1:52:d7:db:af:06:4a:88:87:65:
                    be:39:0e:52:9b:17:4c:eb:a7:e2:1c:c2:16:68:47:
                    72:1d:a3:67:20:76:88:ee:98:bf:66:59:23:4c:f9:
                    a5:0e:ab:0a:0f:b8:56:51:11:7b:72:43:4d:d2:0b:
                    c7:90:b4:24:3d:a3:99:07:0c:db:d6:84:48:6a:46:
                    d3:bd:57:8f:b4:92:53:0c:96:8e:4b:4b:ec:88:27:
                    84:93:ca:c8:0f:85:89:d7:a1:51:bb:6c:53:71:0e:
                    5c:71:9f:a3:30:20:12:83:f9:7e:3b:00:98:67:c6:
                    c5:da:72:93:b7:cd:d7:0a:0e:65:99:a7:6e:d2:1d:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:05:AF:2B:DA:53:F7:DE:39:25:36:52:E3:E5:89:0E:86:90:FD:FD
            X509v3 Authority Key Identifier:
                keyid:B4:09:4B:06:9A:8A:B2:55:2C:DB:CB:34:DC:2E:4D:3D:7F:EE:38:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4094B069A8AB2552CDBCB34DC2E4D3D7FEE38CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/34352e3137312e3235322e302f32322d3234203d3e20323638373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:5d:e3:94:d8:13:e4:70:83:53:8f:19:5d:f6:cf:10:e2:67:
         1b:80:ec:eb:7b:bc:5a:d8:3e:49:70:3b:22:23:25:c5:47:df:
         d7:49:a2:fc:12:e3:2f:e5:e1:88:68:3e:50:41:ef:97:67:c6:
         c1:5b:1a:da:59:e1:6b:16:8b:3b:fd:43:8f:6e:0b:71:f4:05:
         7e:21:b0:4e:02:67:f3:78:af:c6:03:64:02:06:3e:33:23:51:
         9e:83:ec:16:33:4f:a6:12:cb:31:99:6d:e0:24:dc:e1:b9:a5:
         5d:31:72:a0:88:b0:fc:a7:5a:9b:5e:0d:f8:f6:07:64:84:d6:
         09:6d:d7:0e:c6:46:e6:35:9e:f3:f2:22:1b:1b:6d:50:b9:58:
         1a:fd:83:7a:5a:4c:86:b1:48:36:04:06:96:79:73:69:02:43:
         54:35:d6:7b:ce:c1:b8:53:bc:75:c3:cd:ed:73:d8:19:50:e2:
         db:ac:8e:4d:2b:d3:c1:26:65:ca:f8:f4:99:ca:02:3b:aa:58:
         22:60:69:02:71:3b:66:3d:91:31:bd:98:c6:c1:15:41:00:01:
         67:ad:b3:5e:0d:bc:f8:9c:3f:8f:fd:e7:fe:22:38:3f:82:c7:
         d7:e4:6f:b4:31:76:e0:53:f6:50:36:0c:62:51:cd:b3:c6:ab:
         94:c9:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 05:14:49 2025 by rpki-client